Endpoint Access Manager™

Features & Benefits

Intelligent and Granular Policies

Endpoint Access Manager allows you to authorize specific devices, media and interfaces for specific PCs and users leveraging directory services. The policies are communicated to the endpoints in real-time and immediately enforced by the Endpoint Agents. Administrators can grant temporary permissions to on-line and mobile users.

Intelligent Distribution

Endpoint Agents are distributed and installed seamlessly and efficiently across your network. The Agents can also be distributed by common enterprise software distribution tools like Microsoft System Management Server.

Hot-Plug Support

Endpoint Agents monitor Plug-and-Play device drivers that are installed at the endpoint. Based on the policy of that endpoint, the Agent will report the newly installed device to the Management Server and enforce the appropriate access permissions to it.

Mobile Users Support

Mobile user endpoints are monitored and protected. The Endpoint Agent continues to enforce the policy even when the endpoint is not connected to the network. It may apply different access permissions to interfaces (like WiFi) when the endpoint is off the network. Security administrators can temporarily grant mobile users access to a required removable device.

Real-Time Notifications and Auditing

All I/O activities of the managed endpoints are notified in realtime to the Management Server and logged in a database. The events are displayed on the Management Console and communicated to security administrators in a variety of formats such as popup messages and email. The events are also made available to enterprise management systems in SNMP traps.

Advanced Security Agent

The Endpoint Agent is protected from attacks by processes, drivers, services and malicious code on your endpoint. It cannot be bypassed even by users who have administrative privileges to their endpoints.

LiveUpdate Mechanism

The LiveUpdate function controls the software version of the Endpoint Agents. It automatically deploys updates when necessary, minimizing the administrative overhead.

Directory Integration

Endpoint Access Manager is well integrated with enterprise directory infrastructure such as Microsoft Active Directory and Novell eDirectory. This enables administrators to leverage the existing organizational logical layout of objects and groups. It also allows dynamic discovery of new objects added to the network, and optionally installing an agent on any new endpoint.

Enterprise Management Systems Integration

Endpoint Access Manager is well integrated with enterprise management systems such as CA Unicenter, CA eTrust and HP OpenView. This enables administrators to leverage existing management infrastructure and consolidate endpoint security events in unified logs and existing management consoles.

Comprehensive Reporter

Endpoint Access Manager records all endpoint I/O events in an SQL database. A flexible and intuitive reporting module allows administrators to submit customized queries and generate comprehensive reports on endpoint and end user activities.